#industrialsecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #industrialsecurity, aggregated by home.social.
-
Lock down a future-proof career! 🔐 Industrial sectors need expert protection, and we’re here to train you. Join the OT Cybersecurity Training program by The Evolve Edge and walk straight into a guaranteed job!
📧 [email protected]
🌐 www.theevolvedge.com
📞 +91 9871191929 / +91 9311805027#OTCybersecurity #IndustrialSecurity #SCADASecurity #ICSSecurity #CybersecurityTraining #JobGuarantee #100Placement #CareerInCybersecurity #TheEvolveEdge #TechTraining #CyberSecurityJobs #InfoSec
-
Lock down a future-proof career! 🔐 Industrial sectors need expert protection, and we’re here to train you. Join the OT Cybersecurity Training program by The Evolve Edge and walk straight into a guaranteed job!
📧 [email protected]
🌐 www.theevolvedge.com
📞 +91 9871191929 / +91 9311805027#OTCybersecurity #IndustrialSecurity #SCADASecurity #ICSSecurity #CybersecurityTraining #JobGuarantee #100Placement #CareerInCybersecurity #TheEvolveEdge #TechTraining #CyberSecurityJobs #InfoSec
-
Critical cybersecurity incidents continued to grow during 2025, especially in the industrial and food sectors.
Recent reports show the most affected industries were:
• IT → 23%
• Government → 18%
• Industrial → 18%Protecting infrastructure today requires continuous visibility, rapid detection, and expert response capabilities.
#cybersecurity #infosec #industrialsecurity #otsecurity #soc #mdr #incidentresponse
https://www.relianoid.com/blog/critical-cybersecurity-incidents-in-the-industrial-sector/
-
I hate digging through PCAPs, especially in OT/ICS environments, so I built a small offline tool that turns passive traffic captures into a triage report.
New blog post: Turning OT PCAP Pain into a Triage Report
https://0ut3r.space/2026/05/08/ot-pcap-analysis/
Enjoy or not.
#OT #ICS #SCADA #PCAP #Wireshark #tshark #CyberSecurity #IndustrialSecurity #Python #OpenSource
-
I hate digging through PCAPs, especially in OT/ICS environments, so I built a small offline tool that turns passive traffic captures into a triage report.
New blog post: Turning OT PCAP Pain into a Triage Report
https://0ut3r.space/2026/05/08/ot-pcap-analysis/
Enjoy or not.
#OT #ICS #SCADA #PCAP #Wireshark #tshark #CyberSecurity #IndustrialSecurity #Python #OpenSource
-
I hate digging through PCAPs, especially in OT/ICS environments, so I built a small offline tool that turns passive traffic captures into a triage report.
New blog post: Turning OT PCAP Pain into a Triage Report
https://0ut3r.space/2026/05/08/ot-pcap-analysis/
Enjoy or not.
#OT #ICS #SCADA #PCAP #Wireshark #tshark #CyberSecurity #IndustrialSecurity #Python #OpenSource
-
I hate digging through PCAPs, especially in OT/ICS environments, so I built a small offline tool that turns passive traffic captures into a triage report.
New blog post: Turning OT PCAP Pain into a Triage Report
https://0ut3r.space/2026/05/08/ot-pcap-analysis/
Enjoy or not.
#OT #ICS #SCADA #PCAP #Wireshark #tshark #CyberSecurity #IndustrialSecurity #Python #OpenSource
-
#Hannover #Industriemesse 2026
Als externer #Datenschutzbeauftragter ist die Messe für mich jedes Jahr ein Pflichttermin: neue Technologien, faszinierende Robotik, spannende Produkte, Wissensaustausch – und die Frage: Wie bleibt all das mit Blick auf #Datenschutz und #Informationssicherheit #DSGVOkonform ?#HannoverMesse #Datenschutz #DSGVO #PrivacyByDesign #CyberSecurity
#DtnSchtz
#Robotik #Automation #SmartFactory #IndustrialSecurity
#ITSecurity #Compliance
#BusinessNetworking -
#Hannover #Industriemesse 2026
Als externer #Datenschutzbeauftragter ist die Messe für mich jedes Jahr ein Pflichttermin: neue Technologien, faszinierende Robotik, spannende Produkte, Wissensaustausch – und die Frage: Wie bleibt all das mit Blick auf #Datenschutz und #Informationssicherheit #DSGVOkonform ?#HannoverMesse #Datenschutz #DSGVO #PrivacyByDesign #CyberSecurity
#DtnSchtz
#Robotik #Automation #SmartFactory #IndustrialSecurity
#ITSecurity #Compliance
#BusinessNetworking -
#Hannover #Industriemesse 2026
Als externer #Datenschutzbeauftragter ist die Messe für mich jedes Jahr ein Pflichttermin: neue Technologien, faszinierende Robotik, spannende Produkte, Wissensaustausch – und die Frage: Wie bleibt all das mit Blick auf #Datenschutz und #Informationssicherheit #DSGVOkonform ?#HannoverMesse #Datenschutz #DSGVO #PrivacyByDesign #CyberSecurity
#DtnSchtz
#Robotik #Automation #SmartFactory #IndustrialSecurity
#ITSecurity #Compliance
#BusinessNetworking -
🟡 Industrial Incident | 5/10
🇷🇺Fire at Su-57 fighter jet production plant in Russia
A fire broke out within the grounds of the Komsomolsk-on-Amur Aviation Plant (KnAAZ), Russia's only serial production facility for the Su-57 stealth fighter. The blaze occurred in Shop 46, where polymer composite material components for the aircraft are manufactured.💬 SENTINEL: Інцидент може вплинути на темпи виробництва ключового російського озброєння. Причина пожежі невідома — вимагає моніторингу на предмет саботажу.
-
🟡 Industrial Incident | 5/10
🇷🇺Fire at Su-57 fighter jet production plant in Russia
A fire broke out within the grounds of the Komsomolsk-on-Amur Aviation Plant (KnAAZ), Russia's only serial production facility for the Su-57 stealth fighter. The blaze occurred in Shop 46, where polymer composite material components for the aircraft are manufactured.💬 SENTINEL: Інцидент може вплинути на темпи виробництва ключового російського озброєння. Причина пожежі невідома — вимагає моніторингу на предмет саботажу.
-
🟡 Industrial Incident | 5/10
🇷🇺Fire at Su-57 fighter jet production plant in Russia
A fire broke out within the grounds of the Komsomolsk-on-Amur Aviation Plant (KnAAZ), Russia's only serial production facility for the Su-57 stealth fighter. The blaze occurred in Shop 46, where polymer composite material components for the aircraft are manufactured.💬 SENTINEL: Інцидент може вплинути на темпи виробництва ключового російського озброєння. Причина пожежі невідома — вимагає моніторингу на предмет саботажу.
-
🟡 Industrial Incident | 5/10
🇷🇺Fire at Su-57 fighter jet production plant in Russia
A fire broke out within the grounds of the Komsomolsk-on-Amur Aviation Plant (KnAAZ), Russia's only serial production facility for the Su-57 stealth fighter. The blaze occurred in Shop 46, where polymer composite material components for the aircraft are manufactured.💬 SENTINEL: Інцидент може вплинути на темпи виробництва ключового російського озброєння. Причина пожежі невідома — вимагає моніторингу на предмет саботажу.
-
Gianluca Caiazza (https://orcid.org/0000-0002-2820-7121) has joined the ACP section! He will serve as Assistant Professor at the new campus in Vejle. His field of expertise is industrial network edge cybersecurity.
#cybersecurity #infosec #security #industrialSecurity #edgeSecurity
-
Dive into the world of Operational Technology security with our comprehensive OT/ICS Cybersecurity Training! 💻 We're empowering professionals to master the protection of critical infrastructure. Our hands-on program covers everything from SCADA labs and defensive strategies to compliance #OTSecurity #ICSبديرأمن #CriticalInfrastructure #CyberTraining #IndustrialSecurity #SCADASECURITY #CyberCareer #IEC62443 #NIST #OperationalTechnology #SecuringTheFuture #CareerSuccess #JobPlacement
-
🔴 Wake-up call for critical infrastructure security:
CERT Polska’s recent report on an energy sector cyber incident is a stark reminder that modern attacks on critical infrastructure are no longer just about data — it's about disruption and destruction.
https://cert.pl/uploads/docs/CERT_Polska_Energy_Sector_Incident_Report_2025.pdf
#OTSecurity #ICS #CriticalInfrastructure #CyberResilience #IndustrialSecurity
-
Industrial & Factory Security : Best practices to help you prevent losses, strengthen access control, and secure your operations the right way.
#IndustrialSecurity #FactorySecurity #SecurityServices #LossPrevention #CorporateSecurity #BlackDragonSecurityhttps://blackdragonsecurity.com/2025/11/22/industrial-factory-security/
-
🚨 The Jaguar Land Rover hack is more than a corporate breach—it’s a systemic risk to UK manufacturing.
Hackers “Scattered Lapsus$ Hunters” forced factory shutdowns, wiping out £1.7bn in revenue and crippling suppliers.This shows:
⚠️ Supply chains collapse when IT fails
⚠️ Smart factories = single points of failure
⚠️ Cyber resilience must equal industrial resilience
💬 Should governments mandate cyber continuity plans for manufacturers?🔔 Follow @technadu for more cyber threat insights.
#JLRHack #CyberResilience #CyberAttack #IndustrialSecurity #SupplyChainRisk #ScatteredSpider #TechNadu
-
🚨 The Jaguar Land Rover hack is more than a corporate breach—it’s a systemic risk to UK manufacturing.
Hackers “Scattered Lapsus$ Hunters” forced factory shutdowns, wiping out £1.7bn in revenue and crippling suppliers.This shows:
⚠️ Supply chains collapse when IT fails
⚠️ Smart factories = single points of failure
⚠️ Cyber resilience must equal industrial resilience
💬 Should governments mandate cyber continuity plans for manufacturers?🔔 Follow @technadu for more cyber threat insights.
#JLRHack #CyberResilience #CyberAttack #IndustrialSecurity #SupplyChainRisk #ScatteredSpider #TechNadu
-
🚨 The Jaguar Land Rover hack is more than a corporate breach—it’s a systemic risk to UK manufacturing.
Hackers “Scattered Lapsus$ Hunters” forced factory shutdowns, wiping out £1.7bn in revenue and crippling suppliers.This shows:
⚠️ Supply chains collapse when IT fails
⚠️ Smart factories = single points of failure
⚠️ Cyber resilience must equal industrial resilience
💬 Should governments mandate cyber continuity plans for manufacturers?🔔 Follow @technadu for more cyber threat insights.
#JLRHack #CyberResilience #CyberAttack #IndustrialSecurity #SupplyChainRisk #ScatteredSpider #TechNadu
-
Bald ist wieder #itsa. Anfang Oktober trifft man sich wie in jedem Jahr in #Nürnberg auf dem Messegelände, um sich zum Thema #Security auszutauschen.
#FORTINET ist natürlich mit dabei, inklusive einer Ausstellung unserer wunderschönen Ruggedized-Gerätelandschaft.
Ich bin nicht die ganze Woche vor Ort, vermutlich nur am ersten Tag, also wer mal hallo sagen möchte, komm Dienstags vorbei. ;-)
Noch kein Ticket? Dann gerne hier entlang: https://events.fortinet.com/it-sa2025
-
Cybersecurity Isn’t Just an IT Line Item — It’s a Business Imperative – Source: securityboulevard.com https://ciso2ciso.com/cybersecurity-isnt-just-an-it-line-item-its-a-business-imperative-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #operationalresilience #IndustrialSecurity #CyberSecurityNews #SecurityAwareness #SecurityBoulevard #Threats&Breaches #vulnerabilities #riskmanagement #SocialFacebook #SocialLinkedIn #accesscontrol #Cybersecurity #SocialX
-
🔐 Practical Industrial Security: Real-World Lessons from Complex HVDC Projects
We’re excited to announce that our colleague Jan Grotelüschen (GAI NetConsult GmbH) will be speaking at the Industrial Security Conference 2025 in Copenhagen, alongside Simon Gustafson (Amprion GmbH) and co-author Stephan Beirer (GAI NetConsult GmbH).
🎤 Topic of the presentation:
Staying on course in a volatile environment: OT security in complex large-scale HVDC projects – a real-life example⚡ At a glance:
Amprion is currently implementing massive offshore grid connection projects such as BorWin4/DolWin4 and BalWin1/BalWin2. These high-voltage direct current (HVDC) lines span up to 380 km and deliver 5.8 GW of power per project – enough to supply electricity to nearly 6 million people.
In this presentation, the speakers, who are largely responsible for the specification and monitoring of the implementation of OT security for this HVDC project, will present the projects itself and report on the cyber security challenges and lessons learnt.🔍 Key OT Security Challenges Covered:
• Dynamic regulation: Adapting to evolving frameworks like NIS-2, RCE, CRA – even mid-project
• Technology vs. longevity: IT/OT convergence meets decades-long system life cycles
• Managing uncertainty: Constant change in technologies, requirements, and stakeholders📌 This session provides real-world insights into securing critical infrastructure under real conditions – including what worked, what didn’t, and how lessons learned are shaping better security strategies.
🔗 More about the industrial security conference: https://www.linkedin.com/company/industrial-security-conference-cph/posts/?feedView=all
#OTSecurity #CriticalInfrastructure #HVDC #CyberSecurity #EnergyTransition #ICSCPH #GAINetConsult #Amprion #NIS2 #CRA #IndustrialSecurity
-
🔐 Practical Industrial Security: Real-World Lessons from Complex HVDC Projects
We’re excited to announce that our colleague Jan Grotelüschen (GAI NetConsult GmbH) will be speaking at the Industrial Security Conference 2025 in Copenhagen, alongside Simon Gustafson (Amprion GmbH) and co-author Stephan Beirer (GAI NetConsult GmbH).
🎤 Topic of the presentation:
Staying on course in a volatile environment: OT security in complex large-scale HVDC projects – a real-life example⚡ At a glance:
Amprion is currently implementing massive offshore grid connection projects such as BorWin4/DolWin4 and BalWin1/BalWin2. These high-voltage direct current (HVDC) lines span up to 380 km and deliver 5.8 GW of power per project – enough to supply electricity to nearly 6 million people.
In this presentation, the speakers, who are largely responsible for the specification and monitoring of the implementation of OT security for this HVDC project, will present the projects itself and report on the cyber security challenges and lessons learnt.🔍 Key OT Security Challenges Covered:
• Dynamic regulation: Adapting to evolving frameworks like NIS-2, RCE, CRA – even mid-project
• Technology vs. longevity: IT/OT convergence meets decades-long system life cycles
• Managing uncertainty: Constant change in technologies, requirements, and stakeholders📌 This session provides real-world insights into securing critical infrastructure under real conditions – including what worked, what didn’t, and how lessons learned are shaping better security strategies.
🔗 More about the industrial security conference: https://www.linkedin.com/company/industrial-security-conference-cph/posts/?feedView=all
#OTSecurity #CriticalInfrastructure #HVDC #CyberSecurity #EnergyTransition #ICSCPH #GAINetConsult #Amprion #NIS2 #CRA #IndustrialSecurity
-
🔐 Practical Industrial Security: Real-World Lessons from Complex HVDC Projects
We’re excited to announce that our colleague Jan Grotelüschen (GAI NetConsult GmbH) will be speaking at the Industrial Security Conference 2025 in Copenhagen, alongside Simon Gustafson (Amprion GmbH) and co-author Stephan Beirer (GAI NetConsult GmbH).
🎤 Topic of the presentation:
Staying on course in a volatile environment: OT security in complex large-scale HVDC projects – a real-life example⚡ At a glance:
Amprion is currently implementing massive offshore grid connection projects such as BorWin4/DolWin4 and BalWin1/BalWin2. These high-voltage direct current (HVDC) lines span up to 380 km and deliver 5.8 GW of power per project – enough to supply electricity to nearly 6 million people.
In this presentation, the speakers, who are largely responsible for the specification and monitoring of the implementation of OT security for this HVDC project, will present the projects itself and report on the cyber security challenges and lessons learnt.🔍 Key OT Security Challenges Covered:
• Dynamic regulation: Adapting to evolving frameworks like NIS-2, RCE, CRA – even mid-project
• Technology vs. longevity: IT/OT convergence meets decades-long system life cycles
• Managing uncertainty: Constant change in technologies, requirements, and stakeholders📌 This session provides real-world insights into securing critical infrastructure under real conditions – including what worked, what didn’t, and how lessons learned are shaping better security strategies.
🔗 More about the industrial security conference: https://www.linkedin.com/company/industrial-security-conference-cph/posts/?feedView=all
#OTSecurity #CriticalInfrastructure #HVDC #CyberSecurity #EnergyTransition #ICSCPH #GAINetConsult #Amprion #NIS2 #CRA #IndustrialSecurity
-
🔐 Practical Industrial Security: Real-World Lessons from Complex HVDC Projects
We’re excited to announce that our colleague Jan Grotelüschen (GAI NetConsult GmbH) will be speaking at the Industrial Security Conference 2025 in Copenhagen, alongside Simon Gustafson (Amprion GmbH) and co-author Stephan Beirer (GAI NetConsult GmbH).
🎤 Topic of the presentation:
Staying on course in a volatile environment: OT security in complex large-scale HVDC projects – a real-life example⚡ At a glance:
Amprion is currently implementing massive offshore grid connection projects such as BorWin4/DolWin4 and BalWin1/BalWin2. These high-voltage direct current (HVDC) lines span up to 380 km and deliver 5.8 GW of power per project – enough to supply electricity to nearly 6 million people.
In this presentation, the speakers, who are largely responsible for the specification and monitoring of the implementation of OT security for this HVDC project, will present the projects itself and report on the cyber security challenges and lessons learnt.🔍 Key OT Security Challenges Covered:
• Dynamic regulation: Adapting to evolving frameworks like NIS-2, RCE, CRA – even mid-project
• Technology vs. longevity: IT/OT convergence meets decades-long system life cycles
• Managing uncertainty: Constant change in technologies, requirements, and stakeholders📌 This session provides real-world insights into securing critical infrastructure under real conditions – including what worked, what didn’t, and how lessons learned are shaping better security strategies.
🔗 More about the industrial security conference: https://www.linkedin.com/company/industrial-security-conference-cph/posts/?feedView=all
#OTSecurity #CriticalInfrastructure #HVDC #CyberSecurity #EnergyTransition #ICSCPH #GAINetConsult #Amprion #NIS2 #CRA #IndustrialSecurity
-
🔐 Practical Industrial Security: Real-World Lessons from Complex HVDC Projects
We’re excited to announce that our colleague Jan Grotelüschen (GAI NetConsult GmbH) will be speaking at the Industrial Security Conference 2025 in Copenhagen, alongside Simon Gustafson (Amprion GmbH) and co-author Stephan Beirer (GAI NetConsult GmbH).
🎤 Topic of the presentation:
Staying on course in a volatile environment: OT security in complex large-scale HVDC projects – a real-life example⚡ At a glance:
Amprion is currently implementing massive offshore grid connection projects such as BorWin4/DolWin4 and BalWin1/BalWin2. These high-voltage direct current (HVDC) lines span up to 380 km and deliver 5.8 GW of power per project – enough to supply electricity to nearly 6 million people.
In this presentation, the speakers, who are largely responsible for the specification and monitoring of the implementation of OT security for this HVDC project, will present the projects itself and report on the cyber security challenges and lessons learnt.🔍 Key OT Security Challenges Covered:
• Dynamic regulation: Adapting to evolving frameworks like NIS-2, RCE, CRA – even mid-project
• Technology vs. longevity: IT/OT convergence meets decades-long system life cycles
• Managing uncertainty: Constant change in technologies, requirements, and stakeholders📌 This session provides real-world insights into securing critical infrastructure under real conditions – including what worked, what didn’t, and how lessons learned are shaping better security strategies.
🔗 More about the industrial security conference: https://www.linkedin.com/company/industrial-security-conference-cph/posts/?feedView=all
#OTSecurity #CriticalInfrastructure #HVDC #CyberSecurity #EnergyTransition #ICSCPH #GAINetConsult #Amprion #NIS2 #CRA #IndustrialSecurity
-
🔐 Industrielle Sicherheit im wahrem Leben: Praktische Erfahrungen aus komplexen HGÜ-Projekten
Wir freuen uns, ankündigen zu können, dass unser Kollege Jan Grotelüschen (GAI NetConsult GmbH) zusammen mit Simon Gustafson (Amprion GmbH) und Co-Autor Stephan Beirer (GAI NetConsult GmbH) auf der Industrial Security Conference 2025 in Kopenhagen sprechen wird.🎤 Titel des Vortrags:
𝘚𝘵𝘢𝘺𝘪𝘯𝘨 𝘰𝘯 𝘤𝘰𝘶𝘳𝘴𝘦 𝘪𝘯 𝘢 𝘷𝘰𝘭𝘢𝘵𝘪𝘭𝘦 𝘦𝘯𝘷𝘪𝘳𝘰𝘯𝘮𝘦𝘯𝘵: 𝘖𝘛 𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘪𝘯 𝘤𝘰𝘮𝘱𝘭𝘦𝘹 𝘭𝘢𝘳𝘨𝘦-𝘴𝘤𝘢𝘭𝘦 𝘏𝘝𝘋𝘊 𝘱𝘳𝘰𝘫𝘦𝘤𝘵𝘴 – 𝘢 𝘳𝘦𝘢𝘭-𝘭𝘪𝘧𝘦 𝘦𝘹𝘢𝘮𝘱𝘭𝘦⚡ Auf einen Blick:
Amprion realisiert derzeit große Offshore-Netzanschlussprojekte wie BorWin4/DolWin4 und BalWin1/BalWin2. Diese Hochspannungs-Gleichstrom-Übertragungssysteme (HGÜ) haben eine Länge von bis zu 380 km und liefern eine Leistung von 5,8 GW - genug, um fast 6 Millionen Menschen mit Strom zu versorgen.In dieser Präsentation werden die Referenten, die für die Spezifikation und Überwachung der Umsetzung der OT-Sicherheit für dieses HGÜ-Projekt verantwortlich sind, das Projekt selbst vorstellen und aus der täglichen Projektpraxis über die Cybersicherheitsherausforderungen und die gewonnenen Erkenntnisse berichten.
🔍 Die wichtigsten OT-Sicherheitsherausforderungen im Fokus des Vortrags:
- Dynamische Regulierung: Anpassung an sich entwickelnde Rahmenwerke wie NIS-2, RCE, CRA – im laufenden Projekt
- Technologie vs. Langlebigkeit: IT/OT-Konvergenz trifft auf jahrzehntelange Systemlebenszyklen
- Umgang mit Unsicherheit: Ständiger Wandel bei Technologien, Anforderungen und Interessengruppen📌 Der Vortrag bietet Einblicke in die reale Welt der Absicherung kritischer Infrastrukturen unter realen Bedingungen - einschließlich der Frage, was funktioniert hat, was nicht, und wie die gewonnenen Erkenntnisse zu besseren Sicherheitsstrategien führen.
#OTSecurity #CriticalInfrastructure #HVDC #CyberSecurity #EnergyTransition #ISC2025 #GAINetConsult #Amprion #NIS2 #CRA #IndustrialSecurity
-
🔐 Industrielle Sicherheit im wahrem Leben: Praktische Erfahrungen aus komplexen HGÜ-Projekten
Wir freuen uns, ankündigen zu können, dass unser Kollege Jan Grotelüschen (GAI NetConsult GmbH) zusammen mit Simon Gustafson (Amprion GmbH) und Co-Autor Stephan Beirer (GAI NetConsult GmbH) auf der Industrial Security Conference 2025 in Kopenhagen sprechen wird.🎤 Titel des Vortrags:
𝘚𝘵𝘢𝘺𝘪𝘯𝘨 𝘰𝘯 𝘤𝘰𝘶𝘳𝘴𝘦 𝘪𝘯 𝘢 𝘷𝘰𝘭𝘢𝘵𝘪𝘭𝘦 𝘦𝘯𝘷𝘪𝘳𝘰𝘯𝘮𝘦𝘯𝘵: 𝘖𝘛 𝘴𝘦𝘤𝘶𝘳𝘪𝘵𝘺 𝘪𝘯 𝘤𝘰𝘮𝘱𝘭𝘦𝘹 𝘭𝘢𝘳𝘨𝘦-𝘴𝘤𝘢𝘭𝘦 𝘏𝘝𝘋𝘊 𝘱𝘳𝘰𝘫𝘦𝘤𝘵𝘴 – 𝘢 𝘳𝘦𝘢𝘭-𝘭𝘪𝘧𝘦 𝘦𝘹𝘢𝘮𝘱𝘭𝘦⚡ Auf einen Blick:
Amprion realisiert derzeit große Offshore-Netzanschlussprojekte wie BorWin4/DolWin4 und BalWin1/BalWin2. Diese Hochspannungs-Gleichstrom-Übertragungssysteme (HGÜ) haben eine Länge von bis zu 380 km und liefern eine Leistung von 5,8 GW - genug, um fast 6 Millionen Menschen mit Strom zu versorgen.In dieser Präsentation werden die Referenten, die für die Spezifikation und Überwachung der Umsetzung der OT-Sicherheit für dieses HGÜ-Projekt verantwortlich sind, das Projekt selbst vorstellen und aus der täglichen Projektpraxis über die Cybersicherheitsherausforderungen und die gewonnenen Erkenntnisse berichten.
🔍 Die wichtigsten OT-Sicherheitsherausforderungen im Fokus des Vortrags:
- Dynamische Regulierung: Anpassung an sich entwickelnde Rahmenwerke wie NIS-2, RCE, CRA – im laufenden Projekt
- Technologie vs. Langlebigkeit: IT/OT-Konvergenz trifft auf jahrzehntelange Systemlebenszyklen
- Umgang mit Unsicherheit: Ständiger Wandel bei Technologien, Anforderungen und Interessengruppen📌 Der Vortrag bietet Einblicke in die reale Welt der Absicherung kritischer Infrastrukturen unter realen Bedingungen - einschließlich der Frage, was funktioniert hat, was nicht, und wie die gewonnenen Erkenntnisse zu besseren Sicherheitsstrategien führen.
#OTSecurity #CriticalInfrastructure #HVDC #CyberSecurity #EnergyTransition #ISC2025 #GAINetConsult #Amprion #NIS2 #CRA #IndustrialSecurity
-
Oil fields are high-risk targets—remote, valuable, and vulnerable. 💡 The best defense? A layered approach: armed guards, mobile patrols, CCTV, and access control. 🛡️
🔍 Pro tip: Some of the best security providers post insights on their blogs. You might just find what you need there. 👀
#OilFieldSecurity #IndustrialSecurity #TexasBusiness #SecurityServices #CCTV #PrivateSecurity #MobilePatrol #EnergyIndustry
Visit Our Website:https://uniguards.com/ -
Ein großes Dankeschön an alle, die vorbeigeschaut, mitdiskutiert und mit uns in die digitale Zukunft geblickt haben. Genau dieser Austausch macht die Hannover Messe für uns jedes Jahr zu etwas Besonderem.
#HM25 #6G #CyberSecurity #IntelliEdge #IndustrialSecurity #Innovation #DigitaleZukunft #MachineLearning #VirtualReality #QuantumComputing
-
The best ICS testing results don’t come from a single approach. Onsite testing has to be risk-averse, and lab testing can uncover deeper vulnerabilities. The key? A combined approach…
OT environments don't stand up to regular IT pen testing. Any pen tester that doesn't fully understand that could easily destroy systems and take out critical infrastructure.
By strategically selecting devices for lab testing based on onsite insights, you get the best of both worlds without unnecessary risk or cost.
In our latest blog, Head of Hardware Andrew Tierney explains how this method finds hidden threats in ICS networks: https://www.pentestpartners.com/security-blog/ics-testing-best-results-hint-blend-your-approach/#cybersecurity #icsmonitoring #industrialsecurity #cyberdefense #securityresearch #operationaltechnology #incidentresponse #cyberawareness
-
🚨 90% of UK industrial firms hit by cyberattacks this year
IoT vulnerabilities, insider threats, and OT risks are exposing critical systems in manufacturing, energy, and more.
💡 How to stay secure? RELIANOID ADC protects industrial IT infrastructure with:
✅ mTLS authentication
✅ Real-time threat blocking
✅ Zero-downtime updatesStrengthen your defenses today!
#Cybersecurity #IndustrialSecurity #RELIANOID #IoTSecurity #OTSecurity
https://www.relianoid.com/blog/strengthening-industrial-cybersecurity-nearly-90-of-uk-organizations-with-incidents/ -
“Unrecognized Device in OT Environment” → Enable this rule, and you’ll get notified as soon as a new device speaks to the network.
Then, investigate with the metadata and context gathered by our Continuous Inventory.
Learn more at: https://safetybits.io/products/otspm-platform/continuous-inventory/ #Cybersecurity #Inventory #DigitalTransformation #OTSPM #IndustrialSecurity
-
Our inventory and network detections work together.
Network insights complete the inventory, registering new devices as soon as they speak to the network, and security events as they happen.
Context is already correlated for you when you need it, speeding up your forensic investigations.
Learn more at: https://safetybits.io/products/otspm-platform/continuous-inventory/
#Cybersecurity #Inventory #DigitalTranformation #OTSPM #IndustrialSecurity
-
Our Continuous Inventory supports a wide catalog of brands and devices. This allows us to be proactive, providing extra information and actionable security insights.
For example, we’ll gather for you a list of devices needing firmware updates, or that are using default credentials.
Learn more at: https://safetybits.io/products/otspm-platform/continuous-inventory/
#Cybersecurity #Inventory #DigitalTranformation #OTSPM #IndustrialSecurity
-
Our Continuous Inventory tracks the changes of your devices over time.
When you are investigating a suspicious device, you can check when it was added to the network.
Or, if something is misbehaving, you can check when a configuration change took place.
Learn more at: https://safetybits.io/products/otspm-platform/continuous-inventory/
#Cybersecurity #Inventory #DigitalTranformation #OTSPM #IndustrialSecurity
-
Oohh look what I found on my desk this morning! Hot off the press, the 3rd edition. 👍
I don't usually get excited about books, but this is to industrial security what "The C Programming Language" is to devs. The definitive guide to the subject. Best read slowly and with copious notes scribbled down.
-
Microsoft identifies 15 high severity vulnerabilities in affected PLCs running CODESYS software. If successfully exploited, attackers could cause widespread damage including shutting down power plants.
Fortunately, attacks of these nature are rare & the vulnerabilities are difficult to exploit. Nevertheless, both CODESYS & Microsoft recommends organizations running affected devices should patch the PLCs.
https://arstechnica.com/security/2023/08/microsoft-finds-vulnerabilities-it-says-could-be-used-to-shut-down-power-plants/
#infosec #cybersecurity #industrialsecurity #PLC #CODESYS #Microsoft -
Checkout the most identified present and missing controls over the years within industrial environments.
-
For those in the #industrialsecurity world and watching for new advisories, #CISA released four Industrial Control Systems Advisories:
- ICSA-23-017-01 GE Proficy Historian
- ICSA-23-017-02 Mitsubishi Electric MELSEC iQ-F, iQ-R Series
- ICSA-23-017-03 Siemens SINEC INS
- ICSA-22-347-03 Contec CONPROSYS HMI System (CHS) (Update A)https://www.cisa.gov/uscert/ncas/current-activity/2023/01/17/cisa-releases-four-industrial-control-systems-advisories | #CriticalInfrastucture
-
Die US-Behörde CISA hat am 10. November 2022 einen 3 Punkteplan für effizientes Schwachstellenmanagement veröffentlicht: https://cisa.gov/blog/2022/11/10/transforming-vulnerability-management-landscape
Zentrale Punkte sind der #CSAF-Standard und das #VEX-Profil: Maschinenlesbare #Advisory reduzieren den manuellen Aufwand und mitigieren effektiver Schwachstellen.
Die #CISA zeigt hiermit offiziell ihre Unterstützung dieses Standards. Das #BSI erwartet eine Signalwirkung für alle PSIRTs – speziell auch #IndustrialSecurity.
-
Das Common Security #Advisory Framework (#CSAF) liefert maschinenverarbeitbare Advisories
Gemeinsam mit dem Cyber-Defense Campus (CYD Campus) in der Schweiz arbeitet das #BSI daran #OpenSource-#Tools bereitzustellen, damit alle Beteiligten einer Supply-Chain CSAF-Advisories erzeugen und verwalten können, um effizienter Schwachstellen-Informationen auszutauschen und ihre IT-Sicherheit zu verbessern.
👉 https://www.admin.ch/gov/de/start/dokumentation/medienmitteilungen.msg-id-86565.html#IndustrialSecurity #Secvisogram #DeutschlandDigitalSicherBSI
-
Das #BSI hat eine Studie zum Status Quo der „Safety & Security“ in störfallrelevanten Betriebsbereichen von Industrieanlagen veröffentlicht.
Die Studie zeigt, welche Herausforderungen die Cybersicherheit für den Betrieb solcher Anlagen mit sich bringt und zeigt Lösungswege auf. Deren hohe Bedeutung wird auch durch die neuen Meldepflichten der Anlagenverantwortlichen aus dem IT-Sicherheitsgesetz 2.0 deutlich.
👉 https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/Studien/Stoerfallbetriebe/stoerfallbetriebe.html -
Industrielle Steuerungs- und Automatisierungssysteme (Industrial Control Systems, ICS) haben lange Lebenszeiten und sind einem großen Risiko ausgesetzt, wenn sie über ihr Support-Ende hinaus betrieben werden und somit keine sicherheitsrelevanten Updates mehr erhalten.
Eine im Oktober 2021 erschienene Cyber-Sicherheitsempfehlung des #BSI gibt einen Überblick über diesbezügliche Herausforderungen und Maßnahmen.
👉 https://www.allianz-fuer-cybersicherheit.de/SharedDocs/Downloads/Webs/ACS/DE/BSI-CS/BSI-CS_145.pdf -
Mehr #CSAF bitte!
Während das Erstellen von CSAF-Dokumenten mit Hilfe von #Secvisogram einfach ist, fehlt bislang eine Möglichkeit diese auch gut zu verwalten.
Das adressiert das #BSI mit dieser Ausschreibung: https://www.evergabe-online.de/tenderdetails.html?id=417739Damit wird ein Weg zu einem #OpenSource „CSAF Content Management System“ eingeschlagen, dessen Modularität ermöglicht, dass das Backend auch mit beliebigen Frontends funktionieren kann.
-
Die Zusammenhänge zwischen #SBOM , #CSAF und #VEX wurden von Dr. Allan Friedman und Jens Wiesner auf der BSides Las Vegas erklärt: https://youtu.be/DCLvdwbHOVo
Mit #Secvisogram können bereits CSAF-Dateien erstellt und menschenlesbar angezeigt werden. Für Betreiber fehlen aber noch die Tools für den Abgleich mit ihren #Asset Datenbanken. #Contributions welcome: Also ran an die Tasten!
Die Spezifikation ist abrufbar unter: https://docs.oasis-open.org/csaf/csaf/v2.0/csd01/csaf-v2.0-csd01.html#9113-conformance-clause-13-csaf-asset-matching-system -
Sind alle notwendigen Sicherheitsupdates und Patches installiert?
Insbesondere bei industriellen Steuerungen ist das meist sehr schwer zu beantworten. #BSI Mitarbeiter Jens Wiesner erläutert zusammen mit Dr. Allan Friedman am Sonntag, den 1. August 2021 um 20 Uhr auf der Online-Konferenz BSides Las Vegas die zu dieser Fragestellung richtungsweisenden Themen #CSAF , #SBOM und #VEX .
👉 https://bsideslv.org/
👉 https://bsideslv.org/talks#1047570#IndustrialSecurity #Secvisogram #DeutschlandDigitalSicherBSI